PraisonAI versions before 4.6.40 contain a path traversal vulnerability (CWE-22) where hidden metadata in a webpage can cause PraisonAI agents to write attacker-controlled content to arbitrary file paths. The root cause is that the write_file function skips path validation when the workspace parameter is None, which is always the case in production environments. This allows an attacker with limited privileges to write files outside intended directories. The issue is resolved in version 4.6.40.

An attacker can exploit this vulnerability to write files to arbitrary locations on the file system, potentially leading to unauthorized file modification or code execution depending on the environment and usage. The vulnerability requires low attack complexity and no user interaction, but does require some privileges. The impact is rated high due to the ability to write arbitrary files.

Upgrade PraisonAI to version 4.6.40 or later, where the path traversal issue is fixed. No other official remediation or temporary fixes are documented. Patch status is not explicitly confirmed in the vendor advisory, but the description states version 4.6.40 fixes the issue, so applying this update is the recommended mitigation.